apiVersion: apps/v1
kind: Deployment
metadata:
  name: passwords
spec:
  replicas: 1
  selector:
    matchLabels:
      app: passwords
  template:
    metadata:
      labels:
        app: passwords
    spec:
      containers:
        - name: passwords
          image: vaultwarden
          ports:
            - containerPort: 80
          envFrom:
            - configMapRef:
                name: config
            - secretRef:
                name: oidc-client-secret
            - secretRef:
                name: smtp-secret
          volumeMounts:
            - name: data
              mountPath: /data
          resources:
            requests:
              cpu: "100m"
              memory: "200Mi"
            limits:
              cpu: "2"
              memory: "4Gi"
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: vaultwarden-data